Re:Malicious remote code execution backdoor discovered boots...
by raesene9 on Thursday April 04, 2019 @06:02AM
(#19570597)
gems don't, NPM doesn't, PyPI doesn't, NuGet doesn't.... you get the picture.
Basically all apps using package repo's (i.e. all of them) are relying on massive piles of unaudited 3rd party code with usually no idea of provenance.
Basically all apps using package repo's (i.e. all of them) are relying on massive piles of unaudited 3rd party code with usually no idea of provenance.